CVE-2015-8379

Published January 26th, 2016

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.

cakephp/cakephp

CakePHP: The Rapid Development Framework for PHP - Official Repository

GitHub

8.8K